EIP-2026-111399

This exploit targets a file upload vulnerability in PolyPager 1.0rc10's FCKeditor component, allowing arbitrary PHP file upload by bypassing extension checks. It uploads a malicious PHP file with a double extension and provides a remote shell.